Field Notes

concept

Client-side scanning

StatusStableReviewdue UpdatedStands on5 sourcesSupportsnotes

Client-side scanning (CSS) inspects user content on the user’s own device, before encryption is applied or as a condition of sending it, and reports matches to a provider or authority. It is the leading technical proposal for preserving Automated CSAM detection under end-to-end encryption (E2EE), and the contested core of the EU’s child sexual abuse (CSA) regulation debate. The technical invariant is simple: the scan runs where the plaintext lives, so E2EE cannot protect against it — encryption secures the channel, not the endpoint doing the inspecting.

Mechanism

The common design matches content on-device against a server-supplied database of perceptual hashes, the same fingerprints used in server-side scanning. Because the hash database itself is sensitive, designs add safeguards: a threshold so that only a user exceeding a fixed number of matches becomes visible to the provider, often built on secret-sharing or private set intersection, and a second opinion — human review of the matched content before any report. That second safeguard is the weakest of the two, because Automation bias operates on the reviewer who is asked to confirm a match the system has already asserted. Classifiers that generalize to unseen material can substitute for hash matching, at the cost of probabilistic errors on-device.

The Apple episode

Apple’s August 2021 proposal is the flagship episode. It would have run its NeuralHash perceptual hash on photos queued for iCloud upload, comparing them against confirmed-CSAM hashes, with a cryptographic threshold voucher system that kept match information unreadable until an account crossed a match threshold, followed by human review before a report to the National Center for Missing and Exploited Children.1 Apple delayed the rollout in September 2021 after sustained expert backlash, and in December 2022 formally abandoned it, announcing Apple Advanced Data Protection — end-to-end encryption for most iCloud data — instead.2 The sequence matters: the same company moved in one year from scanning on the device to removing its own ability to scan anywhere.

The cryptographers’ critique

Bugs in Our Pockets (2021) — Abelson, Anderson, Bellovin, Benaloh, Blaze, Diffie, Gilmore, Green, Landau, Neumann, Rivest, Schiller, Schneier, Specter, and Weitzner — argues that CSS is not a narrow addition but a general surveillance capability shipped on billions of personal devices.3 Once the infrastructure exists, neither the hash list nor the matching class is technically confined to one content category: the same pipeline can scan for any content a government or platform chooses, and the endpoint’s owner cannot verify what it scans for. The paper separates this structural argument from the policy claim that CSAM detection is worth it; its point is that the policy choice cannot be technically locked in.

The EU policy fight

The EU’s proposed CSA regulation, dubbed “chat control” by critics, made detection orders on private communications — in practice client-side scanning for encrypted services — its most contested element. The Council agreed its position in November 2025, retreating from mandatory detection orders toward risk-mitigation duties and voluntary scanning, while a temporary derogation letting providers scan unencrypted communications voluntarily lapsed in April 2026 and was reinstated in July 2026 until 3 April 2028, with an amendment excluding end-to-end encrypted services from the temporary regime.45 The Council stated explicitly that the exemption does not bind the permanent regulation, whose trilogue negotiations resume in autumn 2026. The state of play is evolving and this note is scheduled for review on 2026-12-01.

The server-side model and the encryption boundary this proposal tries to cross are covered in Automated CSAM detection; the legal frame of the EU debate in EU private communications law.

  1. Apple’s CSAM detection technical summary and child-safety page, August 2021, describing NeuralHash, the threshold voucher system, and human review before reporting. ↩

  2. Apple’s December 2022 newsroom announcement of Advanced Data Protection; contemporaneous reporting confirmed the CSAM-scanning plan was dropped. ↩

  3. Bugs in Our Pockets: The Risks of Client-Side Scanning, 2021, the fifteen-author cryptographers’ analysis. ↩

  4. Council of the EU policy page on preventing child sexual abuse online, recording the November 2025 Council position. ↩

  5. Euronews, 23 July 2026, on the temporary derogation’s extension to 2028 and the E2EE carve-out. ↩

Built on 5 sources (5 external).

Working out connections…